Ncino
Encryption
bad-crypto
bad-crypto
The rule makes sure you are using randomly generated IVs and keys for Crypto calls. Hard-coding these values greatly compromises the security of encrypted data.
Likelihood: LOW
Confidence: LOW
CWE:
- CWE-321: Use of Hard-coded Cryptographic Key
OWASP:
- A02:2021 - Cryptographic Failures